‹ 首页

cyberedge-observe-certificates

@symph0nia · 收录于 5 天前 · 上游提交 6 天前

Collect and inspect TLS leaf certificates for an explicitly authorized CyberEdge scope. Use only when an authorization reference already exists and active service discovery is permitted.

适合你,如果需要定期检查 TLS 证书的有效性和安全性

/ 通过 npx 安装 校验哈希
npx oh-my-skill add symph0nia/cyberedge/cyberedge-observe-certificates
/ 通过 bash 安装
curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- symph0nia/cyberedge/cyberedge-observe-certificates
/ 已经装过?验证本机副本,不用重装
npx oh-my-skill verify symph0nia/cyberedge/cyberedge-observe-certificates
安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。
606GitHub stars
~337最小装载
~337含声明引用
~458文本包总量
索引托管

怎么用

商店整理自技能原文 · 版本 0af016f · 表述以原文为准
它做什么

安装此技能后,Claude 可以收集指定授权范围内的 TLS 叶子证书,执行扫描、搜索证书并生成包含主题、颁发者、SAN、有效期和 SHA-256 指纹的观察报告。

什么时候触发

当用户有一个已存在的授权引用(authorization_ref)且允许主动服务发现时,请求检查特定 scope 的 TLS 证书即可触发。

装好后可以这样说
Claude 会启动扫描并返回证书信息。
Claude 搜索证书并提取指纹。
Claude 按流程执行扫描和搜索。
技能原文 SKILL.md作者撰写 · Apache-2.0 · 0af016f

CyberEdge Observe Certificates

Use cyberedge-agent as the only control-plane interface. Humans do not operate this bridge directly.

Preconditions
  • Require an existing Scope with a non-empty authorization_ref covering every target.
  • Require the exact Skill grant cyberedge-observe-certificates with scan.active.
  • Never widen a Scope, accept arbitrary ports, invoke an external scanner, or bypass RPC policy.
Workflow
  1. Call start_scan with the authorized scope_id and policy_service_baseline.
  2. Watch or read the Task until it reaches a terminal state.
  3. Call search_certificates with the same scope_id.
  4. Call get_task_report to correlate each Certificate with its tls.certificate Observation and DER Evidence.
  5. Treat Subject, Issuer, SAN and validity fields as observations. Report the SHA-256 fingerprint when identifying a certificate.

The policy probes TLS only on open baseline HTTPS ports 443 and 8443. A handshake or parse failure is retained as tls.error; it must not be presented as evidence that no certificate exists.

Machine envelope

Send one JSON object on standard input. Required common fields are request_id, idempotency_key, agent_id, skill_name, and skill_version.

{"request_id":"req-1","idempotency_key":"idem-1","agent_id":"codex-main","skill_name":"cyberedge-observe-certificates","skill_version":"0.1.0","action":"search_certificates","scope_id":"scope-id"}
按 Apache-2.0 许可原样转载,未经改动 · 在 GitHub 查看 →

评论

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。